Thetanuts Finance: $2.1M Attack, Partial White-Hat Recovery

The on-chain options and structured product protocol Thetanuts Finance was exploited for $2.1 million. Security firm Blockaid published the exploit transaction and exploiter address shortly after the attack.

A white-hat intervened and recovered approximately $2 million of the stolen option tokens. The attacker retained roughly $105,000 in USDC, converted to approximately 60 ETH, along with about $34,000 in USDC-denominated option tokens still in the attacker's wallet.

Thetanuts Finance has made no public statement on the exploit.

A Quarter Already on Pace for Records

The two exploits arrive during what is already shaping up as the most heavily exploited quarter in DeFi's history. The Defiant reported last week that Q2 2026 had logged approximately 70 separate exploits through mid-June, roughly double the previous quarterly record in incident count.